Reference Guide
...
RDP Proxy
RDP Proxy Connections
Privileged users (such as administrators) in the target device are called Global Users. To establish an RDP connection using these accounts and to make the global user’s password invisible to the local user, the configuration below is required, allowing Kron PAM to store the Global User credentials in its database and use it for the connection.